Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa
File: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (raw, json)
Hash identifier: QP4KPs363lKNvbDMC91nWR64EDb9a5wYXaiiUC4k7Hs=
Subject key identifier: 90:E4:F7:DD:E7:06:09:AF:E8:F3:56:D3:C1:E1:AF:A6:FC:DE:2F:3B
Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial: 6B622A7EB381C01766B234D39E363C3C22CD64E1
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa
Signing time: Fri 16 May 2025 16:39:34 +0000
ROA not before: Fri 16 May 2025 16:34:34 +0000
ROA not after: Fri 15 May 2026 16:39:34 +0000
asID: 215171
IP address blocks: 2a14:7581:4560::/44 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:62:2a:7e:b3:81:c0:17:66:b2:34:d3:9e:36:3c:3c:22:cd:64:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Validity
Not Before: May 16 16:34:34 2025 GMT
Not After : May 15 16:39:34 2026 GMT
Subject: CN=90E4F7DDE70609AFE8F356D3C1E1AFA6FCDE2F3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0e:c7:56:e7:fd:27:37:1c:b1:30:20:4c:cd:
f5:76:e7:79:16:8a:fb:d9:df:c4:c2:26:91:bd:82:
e0:15:43:e9:10:2f:af:13:3b:a6:e6:aa:5f:8a:17:
8f:1e:9a:43:f1:e6:da:e2:4f:8a:0b:25:66:25:2c:
c7:a0:a5:b2:7b:e3:fe:9b:0b:3c:7e:1a:58:e2:7d:
d8:f4:ac:dc:6f:99:98:46:db:18:7d:9c:47:12:9c:
11:05:c1:fe:f4:89:8e:90:4a:67:8a:47:c8:cc:06:
fb:d3:9f:2c:83:a1:6a:52:a7:10:96:fe:41:f6:89:
a8:ff:38:80:06:e3:a4:12:c8:81:28:d4:80:39:71:
f8:85:b5:34:a5:ff:9b:19:7f:9c:6b:cb:ce:7e:ae:
7a:5a:90:e4:45:82:d8:03:29:6e:12:19:71:5a:0e:
1d:6d:f1:9a:73:d9:03:4f:00:7b:57:91:bf:1e:5a:
e9:a6:58:1b:5b:0d:cc:a1:80:3e:a4:9e:8f:8b:0a:
e0:66:5e:db:6e:e6:7c:ff:2c:0a:b1:6a:ec:df:88:
a2:6f:9c:1c:8a:cb:4a:d2:20:d6:79:9b:61:cf:e9:
bf:5c:e5:3b:a5:5a:19:70:1c:65:2e:4d:fb:fb:29:
53:77:a4:00:75:9c:f6:6c:d6:95:c7:48:e5:8f:d5:
c1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E4:F7:DD:E7:06:09:AF:E8:F3:56:D3:C1:E1:AF:A6:FC:DE:2F:3B
X509v3 Authority Key Identifier:
keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:4560::/44
Signature Algorithm: sha256WithRSAEncryption
9c:4a:03:46:19:68:ce:73:d0:34:e1:6f:16:99:20:9e:a6:05:
93:c9:28:e0:c2:4f:a2:da:2d:d1:01:e3:15:f2:eb:f1:2d:da:
af:bf:30:78:1f:05:97:91:bb:7e:6f:a7:3c:ad:45:48:38:21:
e3:7d:e3:8c:e1:d3:e1:63:88:c7:d7:ca:e4:a0:e5:59:cb:fd:
d5:b8:ad:df:97:1a:7f:ee:f9:ac:3c:0e:26:55:35:86:1d:4e:
ce:2b:15:a8:b9:45:82:f7:62:7e:ef:48:ce:b1:b5:25:a6:4e:
bc:4e:e5:b8:41:27:a5:2d:d7:3e:7a:0e:4c:fd:cf:42:62:e2:
cb:90:b4:cf:8c:42:e6:b9:a1:34:91:30:3e:8c:c7:16:69:50:
db:bb:1b:34:b7:06:5b:d8:e6:80:99:e0:81:6b:ab:65:5e:fb:
9a:d2:90:0e:8b:84:20:0a:b5:2b:67:cc:e9:9c:69:3c:f5:45:
b8:f4:03:e3:1b:d0:04:13:41:52:63:90:57:34:69:d4:ce:3b:
20:69:f5:91:70:96:ae:94:f4:d5:6a:60:21:2d:89:9f:b8:d8:
35:6c:8b:e8:c9:39:9e:05:92:d2:76:29:d9:ff:8b:60:d0:86:
cc:ff:9d:43:77:7e:bc:4f:67:46:3a:91:70:91:52:e9:cd:c5:
1b:6f:67:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:57:14 2025 by rpki-client